A year ago i open a bug with tigase. The problem is that until java >= 1.8 DH-params greater than 2048 make connections with java-thins impossible.
El 2015-11-25 10:26, Mathias Ertl escribió: > Hi Arsimael, > > On Wed, Nov 25, 2015 at 12:09:00AM +0100, Arsimael Inshan wrote: > >> When I created the DH Keys on my server, I generated 2k and 4k keys. >> I was told the 4k keys shouldn't be used (yet) because of >> incompartibillities and they wouldn't increase the security this >> much, but generate way more problems. >> >> Is this still the state of the art? Shall I stick with 2k or is it >> recommendet to switch to 4K Keys? > > We used 4K keys for many months and I haven't received any reports of > problems related to that. > > greetings, Mati > (jabber.at)
